HAPPY BIRTHDAY MEREDITH!!! ... View more

@Seshu, I appreciate you and all the other Meraki employees taking the time to respond and be active on the forums. It really does show Meraki's commitment to delivering a great product.   I was a part of the firmware version conversation. I remember meeting with the head of the MX line and having multiple hour long discussions about it. I remember being told that I just don't get Meraki's philosophy. I remember being told as the customer making the request that customers aren't requesting that feature. I remember hearing that this was something for internal use only because firmware numbers change so often. I remember fighting with the team for over a year and then we got firmware versions.   I currently have two other battles that I am facing: the event log is broken, a case I've had open for 2 years, and Geo-IP filtering isn't perfect yet. With the event log issue, I was told that this was something that was being worked on, but it wasn't a priority as it wasn't as profitable to Meraki. For the Geo-IP filtering, I was told that the system is working as Meraki intended but when I bring up how other companies do Geo-IP, I either get dismissed or "We'll work on it". That ticket has also been on-going for a long time.   I should NOT have to make a feature request for things that are broken, and yet I did. I have stopped for awhile because I was tired of going in every day to make the request.   All this being said, I generally do love the Meraki product! I pitch it to very often and when I do I speak of the good and the bad. It's okay that there's some bad, that just means it gives you time to listen to your customers. Just know that some of your customers want a few more advanced features. ... View more

@Kamome, Definitely understand how you feel! When speaking about Meraki to folks I constantly compare the good with the bad. If you look at some of my posts even on this forum, you will see where I am can be critical of what Meraki has to offer versus other competitors. I have had tense calls and in-person meetings with various people from Meraki.   The simplicity is nice, but administrators need a bit more.Why do I need to call into TAC to get a live view of my CPU utilization which is different from the device utilization? Sure, I can find all that via APIs, but if it's there in support's dashboard, why can't it be in mine? The answer I've always gotten is "If you run into a problem, support WANTS you to reach out", but that's not a satisfying answer. I don't feel great about having to call support for every little problem that I could easily diagnose or fix myself if I had the option to do it. It irks me when the SE tells me "Oh, that's only a change that can be made in the back end".   I will still pitch Meraki as a possible solution for some situations, but I am also pitching other things as well. Your feelings are valid. ... View more

Welcome to the community Allen!! We're here to help so feel free to post away! ... View more

@jdsilva, that's about the time we sent our folks WFH. How are you liking it?   @tantony, I hear that alot from folks I've spoken too. I've always felt like days ran together, but the weekends at home keep me somewhat on schedule. With always being at home, I'm sure time just gets all sorts of messed up. ... View more

Sooo it turns out the Pi can't run Folding@home....    BUT it can run BOINC and the Rosetta@home project which helps to solve medical issues. So I created a Meraki Community Team there to put my Pis to good use. I'll get an old laptop to donate time to the Folding@home project and set it up this weekend.   Also.... Team Meraki has gone up 80 spots since Tuesday over at Folding@home. Way to go guys!! ... View more

@jdsilva, my phone sanitizer has been getting a lot of use from those of us still in the office. Just need to get a fancy sign like yours! ... View more

I'll get my Pi setup for this when I get home! ... View more

Agreed! ... View more

@CarolineS, Was thrilled to see you in a post earlier today! Had to cycle back to see what I missed. Glad to have you back 🙂 ... View more

@SeanW , Unfortunately @Maui_Meraki_Dog is no longer with me. My wife ended up becoming severely allergic to him and we had to give him up. He's with a good family though! He has a new brother (another chihuahua) and his new owners have two little girls that absolutely adore him. ... View more

Is the port connected to the uplink set for 110 as well? ... View more

So it seems like to me your phone may be looking for a specific tagged vLAN. If the phone doesn't see that vLAN then it will assume it does not have an IP address even if other devices may work. I would have your IT personnel check to make sure the PBX (phone server) does not have any settings like that. Additionally, it may be wise to have your IT team check to make sure there aren't any firewall rules that may be interfering. ... View more

@PhilipDAth wrote: > not recognize my company's IP address   What do you mean by this?  What IP address are you referring to? @Kristin , to add onto this: You said that " my Meraki WILL connect to my att internet router". What happens on the front of the device? Does the LED light ever turn white or does it rainbow and then stay orange? What does your IT team see when you plug in your device? Are they able to see any traffic on the device? I have many users in my organization that use Z3s connected straight to their router without any additional devices. I know a few have AT&T. I don't recall having to do anything special to get their devices connected. I will double-check with them when they clock in shortly.   Kudos for you for hopping on the forum and trying to troubleshoot the issue! I'm sure it is very frustrating, but I hope that we will be able to help you out and get this solved!   ... View more

I know this isn't adding anything to the conversation, but this is probably my favorite thread on the forums thus far. ... View more

@PhilipDAth , not sure how it's a wide use case or require changing anything in the GUI in terms of loss and latency. You already get that information in the MX. Should be just as simple as adding it as an option under Network-wide > Configure > Alerts. If we can get an option to say "Send e-mail when a port has been down for 5 minutes", you should be able to add something similar for loss and latency (i.e. if you detect 5% loss for 10 minutes).   Network saturation on the other hand, that's a heavier lift and I do agree with you there @PhilipDAth, that is a much wider use case. ... View more

Hi @Nick ,   The setup is reasonably easy. One thing to keep in mind is that if you are using your work email address to access the dashboard and also intend to use it in SAML, you will have to do one or the other. One way to do it is using a service account not attached to SAML and have all admins in the SAML group.   A couple pointers from the documentation: Limited Single Logout (SLO) is available. Dashboard will use the   SLO URL to redirect users after they logout of Dashboard, and then can be used to link into SLO with the IdP if supported, but Dashboard does not support receiving SAML LogoutRequests from the IdP. Only SAML 2.0 is supported. Dashboard only supports IdP-Init. Users must first authenticate with the IdP and then be passed to Dashboard with a valid token. While IdP platforms may have a variety of other fields, in most cases they can be left blank or at default settings. Only the above information is critical for Dashboard compatibility. SAML SSO for MSPs SAML does support the use of multiple organizations. Similarly to traditional logins, it needs to determine that the user is identical across the affected organizations. Thus, for this to occur, the following must be identical across the designed organizations: X.509 cert fingerprint for the organization SAML administrator role (as only one role attribute can be used in the token) The permissions granted can be different in each Organization, but the role name must be identical When this occurs, the user will be directed to the MSP portal and receive the desired permissions in each organization. The   Consumer URL   for any of the MSP organizations can be used, as they will all direct the user to the MSP portal. ... View more

If you are not using SAML, I believe you have to delete the admin in each organization in your MSP portal. Could be a bit time consuming if you're looking at 100s of organizations.   SAML is the best way to handle this. You can easily add/remove users with various permission levels based on group membership. Here's Meraki's support documentation on SAML integration: Configuring SAML Single Sign-on for Dashboard  ... View more

Well since the 8-port Switch has already been brought up, I would design an MX that has the capability to tell me what's plugged into the ports (similar to that of current switch ports).  ... View more

Funny enough, we just got another rep today! ... View more

I feel like we get a new sales rep every 6 months. in the 3 years we've had Meraki in our environment, we've probably have had 6 different reps. Most of our changes have been b/c of promotions so great for those reps, but it is tough having a really good rep who knows your environment to then go back to starting at square one. ... View more

A couple of things to try that always work for me: When setting up allow/deny rules, put allow rules up top and deny at the bottom When granting access to a single host, use a /32 on the host versus the /24   Doing these two things usually allow me to make my exceptions with zero issues. ... View more

Congrats to all of our All Stars!! ... View more